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HOST COMPUTER SYSTEM 
(E.G., SUPPORT WORKSTATION) 
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RECEIVE A REQUEST TO INITIATE A DATA COMMUNICATIONS 
SESSION WITH A DATA STORAGE SYSTEM 
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ESTABLISH A FIRST PACKET COMMUNICATIONS SESSION FROM A 
HOST COMPUTER SYSTEM TO A DATA COMMUNICATIONS DEVICE 
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202 

ESTABLISH A SECOND PACKET COMMUNICATIONS SESSION FROM 
THE DATA COMMUNICATIONS DEVICE TO A SERVICE PROCESSOR 
WITHIN THE DATA STORAGE SYSTEM 



203 

PERFORM PACKET COMMUNICATIONS BETWEEN THE HOST 
COMPUTER SYSTEM AND THE SERVICE PROCESSOR WITHIN THE 
DATA STORAGE SYSTEM USING THE FIRST AND SECOND PACKET 
COMMUNICATIONS SESSIONS 



FIG. 2 
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DATA COMM. DEVICE 
(E.G., NAT ROUTER) 
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184 




134 
CUSTOMER 

DATA 
(E.G., D.S.S. 

DATA) 



-184 



141 
NETWORK 
MANAGER 
(E.G., SNMP) 



170 

SERVICE PROCESSOR 



172 

MEMORY SYSTEM 



174 


175 


176 


177 


S.A. 


R.A.S. 


R.S. 


S.C. 



171 

A. 



173 
PROCESSOR 



184 


185 


186 


187 


S.P. 


R.A.S. 


R.S. 


S.C. 



f \G. 3 



or 



CO CO CO 




* a: 

*" ° «? ^ 

H Q 9 

^ ai n ° 




o 



co 

h- CO 3 
t- ^ 2 Q! q 

H a 8 * . 



h- CO 

q: z 

co p o 
^ a l. 

tU9:< 

P 3 h 
co CO CO 
>- 




(!) 



co e> a: 
• o 



300 

USER OBTAINS SERVICE TICKET AT H OST COMPUTER SYSTEM 

301 

CONNECTION PROCESS ACTIVATED (EG., USER ACTIVATED OR AUTOMATICALLY, IN 
RESPONSE TO SERVICE TICKET) 

» 

302 

CONNECTION PROCESS RECEIVES USER AUTHENTICATION INFORMATION (E.G., NT 
USERNAME AND GROUP LOGON) FO R THE USER OF THE HOST COMPUTER SYSTEM 

» 

303 

HOST COMPUTER SYSTEM INTERACTS (E.G., USING CONNECTION PROCESS) WITH THE 
VENDOR SECURITY SERVER TO AUTHENTICATE AN IDENTITY OF THE USER BASED ON 
THE USER AUTHENTICATION INFORMATION 




306 

CONNECTION PROCESS RECEIVES DATA STORAGE SYSTEM SEARCH CRITERIA (E.G., 

PORTION OF SERIAL NUMBER FOR DATA STORAGE SYSTEM FROM USER OR 
AUTOMATICALLY FROM THE SERVICE TICKET) 



+ 

307 

CONNECTION PROCESS PROVIDES DATA STORAGE SEARCH CRITERIA AND USER 
AUTHENTICATION INFORMATION TO CONNECTION MONITOR COMPUTER SYSTEM (E.G., 
VIAAUDP PACKET THROUGH SECURITY SERVER) 

+ 

308 

CONNECTION MONITOR COMPUTER SYSTEM DETERMINES A SET OF DATA STORAGE 
SYSTEM IDENTITIES THAT MATCH THE DATA STORAGE SYSTEM SEARCH CRITERIA AND 
FORWARDS SET BACK TO CONNECTION PROCESS IN HOST COMPUTER SYSTEM 

i 

309 

CONNECTION PROCESS IN HOST COMPUTER SYSTEM RECEIVES THE SET OF DATA 
STORAG E SYSTEM IDENTITIES 

» 

310 

CONNECTION PROCESS ALLOWS THE USER OF THE HOST COMPUTER SYSTEM TO 
SELECT AT LEAST ONE DATA STORAGE SYSTEM IDENTITY FROM THE SET OF DATA 
STORAGE SYSTEM IDENTITIES 



Fip. 5 



311 

CONNECTION PROCESS RECEIVES USER INSTRUCTION TO ESTABLISH A 
COMMUNICATION SESSION WITH THE SELECTED DATA STORAGE SYSTEM 



312 

CONNECTION PROCESS PROVIDES A REQUEST TO CONNECTION MONITOR FOR AN 
ADDRESS OF A DATA COMMUNICATIONS DEVICE THAT IS AUTHORIZED TO ESTABLISH A 
PACKET COMMUNICATIONS SESSION WITH THE SELECTED DATA STORAGE SYSTEM 

(E.G., REQUEST CAN INCLUDE: 
I) USER AUTHENTICATION INFORMATION SUCH AS USER ID/PASSWORD; 
II) CUSTOMER INFORMATION SUCH AS CUSTOMER AND SITE NAME; 
III) DATA STORAGE SYSTEM CONNECTION INFORMATION SUCH AS PHONE NUMBER OF 
SERVICE PROCESSOR MODEM ) 

* 

313 

CONNECTION MONITOR RECEIVES REQUEST AND DETERMINES NEXT AVAILABLE DATA 
COMMUNICATIONS DEVICE ADDRESS (E.G., NAT ROUTER IP ADDRESS) AND RETURNS 
THE ADDRESS OF THE DATA COMMUNICATIONS DEVICE TO THE CONNECTION PROCESS 

j 

314 

CONNECTION PROCESS RECEIVES THE ADDRESS OF THE DATA COMMUNICATIONS 
DEVICE 

* 

315 

CONNECTION PROCESS INITIATES A FIRST PACKET COMMUNICATION SESSION (EG 
TELNET SESSION) FROM THE HOST COMPUTER SYSTEM USING THE CONNECTION ' 
INFORMATION (E.G., ADDRESS) FOR THE DATA COMMUNICATIONS DEVICE 

* 

316 

CONNECTION PROCESS PROVIDES FIRST PACKET COMMUNICATIONS SESSION 
AUTHENTICATION INFORMATION (E.G., USER AUTHENTICATION INFORMATION) TO THE 
DATA COMMUNICATIONS D EVICE (EG., VIA THE TELNET SESSION) 

* 

317 

DATA COMMUNICATION DEVICE (EG., ROUTER 137) COMMUNICATES WITH AN 
AUTHENTICATION COMPUTER SYSTEM (E.G., USER ACCOUNT SERVER 135, SUCH AS A 
RADIUS SERVER) TO VERIFY IF THE USER OF THE HOST COMPUTER SYSTEM IDENTIFIED 
IN THE USER AUTHENTICATION INFORMATION IS AUTHORIZED TO CAUSE THE DATA 
COMMUNICATIONS DEVICE TO ESTABLISH COMMUNICATION TO THE DATA STORAGE 
SYSTEM (EG., VIA FIRST AND SECOND PACKET COMMUNICATIONS SESSIONS) 



FIG. 6 



318 

USER ACCOUNT SERVER (E.G., RADIUS SERVER) REQUESTS USER AUTHENTICATION 
AND GROUP MEMBERSHIP VERIFICATION FROM DOMAIN SERVER (E.G., NT DOMAIN 
CONTROLLER) 
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DOMAIN SERVER RETURNS REQUESTED INFORMATION TO USER ACCOUNT SERVER 



320 

USER ACCOUNT SERVER RETURNS VERIFIED USER GROUP MEMBERSHIP TO DATA 
COMMUNICATIONS DEVICE TO DETERMINE ACCESS OR DENIAL OF ESTABLISHMENT OF 
FIRST PACKET COMMUNICATIONS SESSION 



ACCESS 
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DENIED t 
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322 

TERMINATE SESSION 



321 

'DATA COMMUNICATIONS DEVICE* 
DETERMINES IF USER IS 
INTICATED AND AUTHORI2 
.ACCESS DATA COMMUNICATIONS 
DEVICE 



323 

DATA COMMUNICATIONS DEVICE INDICATES TO THE HOST COMPUTER SYSTEM THAT 

PERMISSION IS GRANTED TO CONNECTION PROCESS TO ESTABLISH 
COMMUNICATIONS WITH DATA STORAGE SYSTEM 



324 

CONNECTION PROCESS NEGOTIATES WITH DATA COMMUNICATIONS DEVICE TO 
PROVIDE SECOND PACKET COMMUNICATIONS SESSION CONNECTION INFORMATION 

(E.G., DATA STORAGE SYSTEM CONNECTION INFORMATION SUCH AS A PHONE 
NUMBER AND USER A UTHENTICATION INFORMATION) 



325 

DATA COMMUNICATIONS DEVICE INITIATES THE SECOND PACKET COMMUNICATIONS 

SESSION (E.G., 182) TO THE DATA STORAGE SYSTEM USING THE DATA STORAGE 
SYSTEM CONNECTION INFORMATION (E.G., ROUTER CAUSES MODEM TO DIAL MODEM 
ASSOCIATED WITH THE SERVICE PROCESSOR IN DATA STORAGE SYSTEM) 

FIG. 7 



326 

DATA COMMUNICATIONS DEVICE RETURNS SECOND PACKET COMMUNICATIONS 
SESSION CONNECTION INITIATION STATUS BACK TO CONNECTION PROCESS IN 
HOST COMPUTER SYSTEM VIA FIRST PACKET COMMUNICATIONS SESSION 



327 

SERVICE PROCESS IN DATA STORAGE SYSTEM RECEIVES A REQUEST (E G 
INCOMING CALL TO SERVICE PROCESSOR MODEM) TO ESTABLISH A PACKET 
COMMUNICATIONS SESSION WITH THE DATA COMMUNICATIONS DEVICE 



328 

SERVICE PROCESS ACTIVATES REMOTE ACCESS SERVICE IN SERVICE PROCESSOR 
TO AUTHENTICATE AND AUTHORIZE INCOMING SECOND PACKET COMMUNICATIONS 



329 

REMOTE ACCESS SERVICE IN SERVICE PROCESSOR REQUESTS USER 
AUTHENTICATION INFORMATION (E.G., USERNAME / PASSWORD) FROM DATA 

COMMUNICATIONS DEVICE 



330 

DATA COMMUNICATIONS DEVICE PROVIDES USER AUTHENTICATION INFORMATION 

TO REMOTE ACCESS SERVER 



331 

REMOTE ACCESS SERVER AUTHENTICATES AND AUTHORIZES INCOMING SECOND 

PACKET COMMUNICATIONS SESSION 



333 

TERMINATE ACCESS TO 
DATA STORAGE SYSTEM 
SERVICE PROCESSOR 



332 

IS SECOND PACKET 
COMMUNICAITONS SESSION 
AUTHENTICATED?^ 



YES 



1 



334 

DATA COMMUNICATIONS DEVICE REQUESTS DATA STORAGE SYSTEM ADDRESS 
INFORMATION FROM REMOTE ACCESS SERVICE IN SERVICE PROCESSOR 



335 

REMOTE ACCESS SERVER RETURNS (E.G., VIA DHCP), TO THE DATA 
COMMUNICATIONS DEVICE, DATA STORAGE SYSTEM ADDRESS INFORMATION 
IDENTIFYING AN ADDRESS (E.G., A STATICALLY DEFINED IP ADDRESS) OF THE DATA 

STORAGE SYSTEM 
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336 

REMOTE ACCESS SERVICE NOTIFIES ROUTE SERVICE PROCESS IN SERVICE PROCESSOR 
OF ESTABLISHMENT OF, SECOND PACKET COMMUNICATIONS SESSION 
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337 

DATA COMMUNICATIONS DEVICE (E.G., MODEM UNDER ROUTER CONTROL) FORWARDS 
SECOND PACKET COMMUNICATIONS SESSION STATE INFORMATION (E.G., DATA STORAGE 
SYSTEM ADDRESS ROUTING INFORMATION AND MODEM SPEED) TO NETWORK 
MANAGEMENT COMPUTER SYSTEM 



338 

NETWORK MANAGEMENT COMPUTER SYSTEM FORWARDS ROUTING INFORMATION 
CONTAINING DATA STORAGE SYSTEM ADDRESS AND MODEM SPEED TO THE HOST 
COMPUTER SYSTEM VIA THE CONNECTION MONITOR COMPUTER SYSTEM 



339 

CONNECTION PROCESS IN HOST COMPUTER SYSTEM RECEIVES SECOND PACKET 
COMMUNICATIONS CONNECTION STATE INFORMATION • 



340 

CONNECTION PROCESS IN HOST COMPUTER SYSTEM ADJUSTS CONNECTION SPEED OF 
FIRST PACKET COMMUNICATIONS SESSION BASED ON SECOND PACKET 
COMMUNICATIONS CONNECTION STATE INFORMATION (E.G., BASED ON SERVICE 

PROCESSOR MODEM SPEED) 



341 

CONNECTION PROCESS SENDS HOST COMPUTER SYSTEM ADDRESS (EG., IP ADDRESS OF 

HOST) TO ROUTE SERVICE PROCESS OPERATING IN SERVICE PROCESSOR OF DATA 
. STORAGE SYSTEM VIA FIRST AND SECOND PACKET COMMUNICATIONS SESSIONS 



342 

ROUTE SERVICE PROCESS IN SERVICE PROCESSOR OF DATA STORAGE SYSTEM ADDS 
ROUTE PATH TO HOST COMPUTER SYSTEM INTO ROUTE TABLE 



I 



343 

ROUTE SERVICE PROCESS ACKNOWLEDGES RECEIPT OF HOST COMPUTER SYSTEM 
ADDRESS, THUS ENABLING PACKET COMMUNICATIONS SESSION CONNECTIVITY BETWEEN 
HOST COMPUTER SYSTEM AND SERVJCE PROCESSOR IN DATA STORAGE SYSTEM 



* FIG. 9 



